This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json) Hash identifier: 9LfFdCPiLITIPBxpHfvLDaQHf7u5EWAJe0CSHah/Cv4= Subject key identifier: E3:11:60:18:4B:7D:93:6A:BB:3B:A8:5C:2A:84:CF:ED:26:11:46:70 Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2 Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2 Certificate serial: 019AFD3181812591526AF98487ECC988AC8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft Manifest number: 05AF Signing time: Mon 08 Dec 2025 09:01:11 +0000 Manifest this update: Mon 08 Dec 2025 09:01:11 +0000 Manifest next update: Tue 09 Dec 2025 09:01:11 +0000 Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: GChCWHi81F7L3GfXvxRfthdA3639wCsm6j5FqPg/wfI=) 2: zlH1YpMBnNZnNtFhgB3H0QDkGsY.roa (hash: YxbEBWdcoPz8a52GzX2VTy8310RPqgqc10/H2kW+jig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:31:81:81:25:91:52:6a:f9:84:87:ec:c9:88:ac:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2 Validity Not Before: Dec 8 09:01:11 2025 GMT Not After : Dec 9 09:01:11 2025 GMT Subject: CN=e31160184b7d936abb3ba85c2a84cfed26114670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7c:a1:73:2d:ce:49:54:99:e7:29:5c:5b:ed: 02:d5:14:d9:2e:70:6a:4c:8e:5a:a7:b3:4f:e9:f8: 57:a0:86:8d:34:9f:87:39:d0:dc:b2:95:e2:d2:89: 33:94:d0:1e:29:17:65:b0:68:61:03:cf:a3:5e:00: c9:f1:fc:8a:eb:ec:cb:47:66:60:ad:f7:67:c4:47: 74:ce:b8:30:68:37:38:e3:3a:76:53:48:7f:41:f9: a8:7d:2c:e5:1f:72:37:9b:9e:da:4f:05:76:f4:b9: 7c:9a:75:2c:b1:21:e6:1f:ca:e6:af:aa:78:6e:60: 3e:01:64:f2:1f:3a:7a:ce:c6:aa:d8:0e:f1:fc:ea: c5:da:8c:2e:a7:c6:d5:71:64:a2:c4:41:a6:5c:c8: 70:21:1b:2f:ee:0e:f1:39:26:2d:b7:ab:e1:b7:b8: 2f:aa:e3:d1:5b:92:12:f1:4d:1b:74:6d:18:b2:d0: e4:98:a9:b1:53:98:3e:5b:a0:e3:cd:bc:3a:4c:e9: e7:9a:50:0f:80:9e:67:61:ec:d3:b3:a4:cc:eb:22: a0:6e:3b:8f:01:3e:66:1f:23:10:63:2d:9c:ff:01: 62:3e:33:b0:a8:17:3e:6f:a7:62:10:97:f9:1a:67: 55:9d:2c:0e:59:70:39:e5:ad:c5:da:17:6b:a4:51: d3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:11:60:18:4B:7D:93:6A:BB:3B:A8:5C:2A:84:CF:ED:26:11:46:70 X509v3 Authority Key Identifier: keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:ff:a4:de:79:49:29:2a:17:97:98:69:f7:17:f2:dc:4c:fd: fd:3c:32:81:f8:1c:2d:24:df:a3:87:25:64:f2:16:bf:87:e0: c2:31:a1:49:8b:38:19:97:91:95:be:33:56:b6:15:eb:2e:59: 5e:2c:35:a9:bd:28:42:e9:90:fa:34:c1:04:ae:e8:24:fe:45: 0a:f2:40:13:4d:89:f0:d9:4e:53:da:8e:42:e4:81:e8:2d:88: 4e:14:e8:fb:9c:0d:e2:c1:4e:2d:a4:4c:19:d2:ce:04:84:7d: 82:0f:78:7d:48:95:50:71:17:b3:ae:f2:83:57:28:68:0f:d6: 86:35:d8:ea:5a:47:aa:db:43:9f:85:49:9d:3b:f6:25:06:b6: 7e:48:2e:b6:c9:d0:bb:83:02:a5:6e:f0:cd:bd:1b:8f:66:5e: d0:ed:21:d4:b7:a2:de:50:64:6b:7f:f8:73:f8:0c:af:ea:6f: 6d:8f:80:56:27:cc:e8:08:46:46:c6:ae:19:32:b5:46:51:69: 9b:d3:9d:2e:17:ae:dd:fe:7a:84:a6:d5:20:95:a8:1d:0f:ba: 6d:23:e8:94:16:bc:30:ca:d3:bd:e3:82:e7:42:17:1a:db:77: 36:b5:b5:e6:37:05:7e:69:47:57:71:1d:2a:21:1b:af:ca:99: 41:26:ee:1a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr9MYGBJZFSavmEh+zJiKyNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMzBmMmY2NzJmYjU0YmE0OTc3YzZlMWE2YmEyNzEzMWMy MzFmZjIwHhcNMjUxMjA4MDkwMTExWhcNMjUxMjA5MDkwMTExWjAzMTEwLwYDVQQD EyhlMzExNjAxODRiN2Q5MzZhYmIzYmE4NWMyYTg0Y2ZlZDI2MTE0NjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnyhcy3OSVSZ5ylcW+0C1RTZLnBq TI5ap7NP6fhXoIaNNJ+HOdDcspXi0okzlNAeKRdlsGhhA8+jXgDJ8fyK6+zLR2Zg rfdnxEd0zrgwaDc44zp2U0h/QfmofSzlH3I3m57aTwV29Ll8mnUssSHmH8rmr6p4 bmA+AWTyHzp6zsaq2A7x/OrF2owup8bVcWSixEGmXMhwIRsv7g7xOSYtt6vht7gv quPRW5IS8U0bdG0YstDkmKmxU5g+W6Djzbw6TOnnmlAPgJ5nYezTs6TM6yKgbjuP AT5mHyMQYy2c/wFiPjOwqBc+b6diEJf5GmdVnSwOWXA55a3F2hdrpFHT2wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOMRYBhLfZNquzuoXCqEz+0mEUZwMB8GA1UdIwQY MBaAFPow8vZy+1S6SXfG4aa6JxMcIx/yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qRHk5bkw3VkxwSmQ4Ymhwcm9uRXh3akhfSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMTk2OGQwLWZhZjEtNGUzNy1hYzg4 LWQ0MDRiNDgwYzU2Ny8xLzEtakR5OW5MN1ZMcEpkOGJocHJvbkV4d2pIX0kubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzYxLzE5NjhkMC1mYWYxLTRlMzctYWM4OC1kNDA0YjQ4MGM1 NjcvMS8xLWpEeTluTDdWTHBKZDhiaHByb25FeHdqSF9JLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmP+k 3nlJKSoXl5hp9xfy3Ez9/TwygfgcLSTfo4clZPIWv4fgwjGhSYs4GZeRlb4zVrYV 6y5ZXiw1qb0oQumQ+jTBBK7oJP5FCvJAE02J8NlOU9qOQuSB6C2IThTo+5wN4sFO LaRMGdLOBIR9gg94fUiVUHEXs67yg1coaA/WhjXY6lpHqttDn4VJnTv2JQa2fkgu tsnQu4MCpW7wzb0bj2Ze0O0h1Lei3lBka3/4c/gMr+pvbY+AVifM6AhGRsauGTK1 RlFpm9OdLheu3f56hKbVIJWoHQ+6bSPolBa8MMrTveOC50IXGtt3NrW15jcFfmlH V3EdKiEbr8qZQSbuGg== -----END CERTIFICATE-----Generated at Mon Dec 8 11:47:25 2025 by rpki-client